search menu icon-carat-right cmu-wordmark

Adapting the SQUARE Process for Privacy Requirements Engineering

July 2010 Technical Note
Ashwini Bijwe (Carnegie Mellon University), Nancy R. Mead

In this 2010 report, the authors explore how the SQUARE process can be adapted for privacy requirements engineering in software development.

Publisher:

Software Engineering Institute

CMU/SEI Report Number

CMU/SEI-2010-TN-022

Abstract

As software systems become more distributed and complex, maintaining privacy of data and ensuring data integrity remain challenges for software practitioners. Developing such systems not only poses technical challenges but also demands compliance with privacy laws. Engineering precise privacy requirements is an important step in building these software systems. This technical note explores the use of a disciplined approach to identifying privacy requirements, primarily how the Security Quality Requirements Engineering (SQUARE) process, which was developed for security requirements engineering, can be adapted for privacy requirements engineering in software development.